HIGH7.5
GO-2022-0521
Stack exhaustion from deeply nested XML documents in encoding/xml
Quick fix
GO-2022-0521 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.17.12Details
Calling Decoder.Skip when parsing a deeply nested XML document can cause a panic due to stack exhaustion.
Are you affected?
Enter the version of the package you're using.